Privacy Policy for FaktBlitz
1. Controller and principle
This policy applies to the FaktBlitz app, the website faktblitz.punktdev.com and these legal pages on punktdev.com. The controller is Real Movement Analytics GmbH, Kleines Everstal 18d, 44388 Dortmund, Germany (legal notice). Contact: faktblitz@punktdev.com.
FaktBlitz works without an account. The app contains no ads and no third-party analytics, tracking or crash reporting services. We do not create usage profiles and make no automated decisions within the meaning of Art. 22 GDPR. The game is suitable for all ages but is not specifically directed at children under 13.
2. Your progress
The app stores best scores per category, FaktBlitz IQ, statistics, the daily duel and your streak, lives, diamonds, the current round, recently seen facts and your settings (language, sound, haptics, hints) on your device. It also stores the identifiers of your last 100 purchases at most (section 5) and when it last asked for a rating.
“Delete all progress” in the settings resets progress, diamonds (including purchased ones), statistics, the daily duel and recently seen facts, and removes the scheduled reminder. Settings, the time of the last rating request and the identifiers of purchases already credited are kept. If iCloud sync is active (see below), deleting also resets the progress in iCloud, and your other devices pick that up the next time they start.
iCloud (iPhone): If you are signed in to iCloud on your iPhone, the app syncs best scores, FaktBlitz IQ, statistics, the daily duel and your streak, and recently seen facts through Apple's iCloud key-value storage. That way your progress follows you to your other devices with the same Apple ID. Lives, diamonds, purchase identifiers and settings stay on the device. The data sits in your iCloud account and is processed by Apple; we have no access to it and do not receive it. Apple processes it under its own privacy policy. Without an iCloud sign-in, or if you turn off iCloud for FaktBlitz, nothing is synced through iCloud. The legal basis is Art. 6(1)(b) GDPR.
This storage is necessary for the game (Section 25(2) No. 2 TDDDG; where personal data is involved, Art. 6(1)(b) GDPR). The data on the device remains until you delete it in the app or on your device, or uninstall the app. The progress in iCloud stays after uninstalling until you reset it in the app. Depending on your device settings, operating system backups may contain a copy. On Android, FaktBlitz allows automatic backup: if you have it turned on, Android backs up the app data to your Google account and restores it on a new device. These backups are managed by Apple or Google, not by us.
3. Internet connection
FaktBlitz uses no game server of ours. All facts and images are included in the app, and the game also works without internet. The app connects to the store to retrieve products and prices, process purchases and check pending purchases (section 5). The rating dialog, sharing and email use services or apps provided by Apple, Google or the providers you choose (section 4).
From version 1.0.2, the app asks updates.faktblitz.punktdev.com on every cold start whether there is an update for its program code, such as a bug fix or new facts. It downloads such an update in the background from the same server and uses it from the next start. This transmits your platform (iOS/Android), app version, update channel, the identifiers of the built-in and the currently used program version and, where applicable, of recently failed updates (the same for all users on that version), the requested file address and, for technical reasons, your IP address. No device or installation identifier is transmitted. The purpose is to fix errors quickly without waiting for a store update. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is an app that works without errors. The update server runs on Cloudflare (section 8). Our server does not store these requests, and Workers Logs are disabled. Cloudflare also processes technical operating data as described in section 6.
4. Reminder, sharing and feedback
Reminder: After your first daily duel the app asks whether it may remind you of the next one at 7 pm. It schedules the reminder itself on your device; we do not run a push service and receive no device identifier. You can revoke the permission at any time in your system settings.
Sharing: If you share a result, the app opens your device's share menu with a ready-made text (score or result grid and a link to the website). You decide what you send and to whom.
Challenging friends: After a round in a category, the shared text includes a link to faktblitz.punktdev.com/d/. The link only contains the category, your score and the order of the facts you played, no names or identifiers. Anyone who receives the link can see this information. Whoever opens it goes straight to the same round in the app or, without the app, to a page on our website. There, Cloudflare processes the IP address and request data as described in section 6; the page only displays the information from the link, stores nothing and sets no cookies.
Rating: After a new best score the app may show Apple's or Google's rating dialog at most once every 60 days. You submit a rating directly to the store.
Report a fact error: This opens your email app with a prepared message to faktblitz@punktdev.com. It contains the question, both answers and the score of the round. Nothing is sent until you send it yourself (section 7).
The legal basis for these features is Art. 6(1)(b) GDPR, and for the reminder also your permission in the operating system.
5. App Store, Google Play and purchases
You get FaktBlitz from Apple's App Store or Google Play. Apple and Google process account, download and, where applicable, payment data as independent controllers under their privacy policy (Apple) and privacy policy (Google). For users in the EU these are Apple Distribution International Ltd. and Google Ireland Ltd., both in Ireland. The stores provide us with aggregated usage and sales figures. For purchases, individual order and transaction information may also be available. Depending on your permissions and settings, the platforms may provide technical crash reports. This does not give us full card or bank details.
We use personal order, transaction and crash information from the stores solely to handle purchase and support questions. The legal basis is Art. 6(1)(b) GDPR for contract-related matters and otherwise Art. 6(1)(f) GDPR; our legitimate interest is handling support requests. We delete our copies after the case is closed, once they are no longer needed to establish or defend legal claims. Where statutory retention obligations apply, we retain the required data under Art. 6(1)(c) GDPR until those obligations expire.
You buy diamond packs directly in the respective store. We do not receive any card, bank or account data. The app receives the product ID, a transaction ID and the purchase status from the store. Once the store reports the purchase as successful, it credits the diamonds and then confirms the purchase with the store. It stores the transaction ID with your game progress on your device so that no purchase is credited twice. Pending payments, for example when parental approval is required, are only credited once the store confirms them. Nothing is sent to a server of ours. The legal basis is Art. 6(1)(b) GDPR.
6. Website
The website faktblitz.punktdev.com is delivered via Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. With every request, Cloudflare processes your IP address and technical request data such as time, requested address, browser information and response status in order to deliver the page and protect it against disruption and abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. We have not enabled access logging (Workers Logs) for this website, and we do not analyse access logs. Cloudflare also processes technical operating data under its privacy policy.
The website faktblitz.punktdev.com sets no cookies, stores nothing in your browser and uses no analytics, tracking or advertising services. Images are served from our own server; no fonts are loaded (the site uses your device's system fonts). If you open an external link, for example to a store, the privacy policy of that provider applies there.
These legal pages are hosted on punktdev.com, which is also delivered via Cloudflare. There the page reads any light/dark preference stored in your browser's local storage so that your chosen appearance is kept (Section 25(2) No. 2 TDDDG). Nothing is transmitted to us.
7. Contact by email
If you email us, for example at faktblitz@punktdev.com, the message arrives in our company mailbox at Microsoft 365 (Microsoft Ireland Operations Ltd., Ireland). Microsoft stores the email including content and attachments as our processor under a data processing agreement (Art. 28 GDPR), generally in data centres in the EU. For transfers to Microsoft Corporation in the USA, for example for support or security, Microsoft relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
We process your address, the content and any information you choose to provide in order to answer your request. The legal basis is Art. 6(1)(b) GDPR for contract-related requests and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests. We delete the message once it is no longer needed for follow-up questions, legal defence or statutory retention obligations. Providing data is voluntary; without a reply address we cannot answer.
8. Recipients and processing outside the EU
We use these service providers for the purposes described:
- Cloudflare, Inc. (USA): hosting of the website and the app's update server as our processor under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses apply in addition. Details are in the Cloudflare DPA.
- Microsoft Ireland Operations Ltd. (Ireland): Microsoft 365, our email mailbox, as our processor under a data processing agreement (Art. 28 GDPR). Data is generally stored in the EU; transfers to Microsoft Corporation (USA) are covered by the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
Apple and Google are independently responsible for the App Store and Google Play (section 5). You can request a copy of the safeguards at faktblitz@punktdev.com.
9. Your rights
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to withdraw any consent with effect for the future.
Objection: Where we process personal data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation.
You have the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
Your game progress is stored on your device and, where applicable, in your iCloud account or Google backup. We have no access to it, so we cannot view it, delete it for you or hand it over. You can do that yourself in the app or on your device.
10. Changes and language versions
We update this policy when the app, the website or the law changes. The version published here applies. This is a translation of the German version, which prevails in case of discrepancies.